What I claim is: 



1 1. InanIEEE802.11(b)wirelessLAN, a method for accessing and analyzing the 

2 contents of data packets or frames transmitted along a IEEE 802. 11 (b) wireless 

3 communication channel, comprising the steps of: 

4 establishing a direct wireless logical connection with the wireless 

5 communications network; 

6 receiving wirelessly, in real-time, data packets or frames transmitted in 

7 the wireless communications network for all stations or devices associated 

8 : therewith; 

9 . performing over a first period of time a detailed protocol analysis on 

10 the contents of the header of the data packets or frames, including analyzing 

1 1 associated protocol layers in detail; and 

1 2 displaying in real time the results of tiie analysis to a user. 

1 2. The method of Claim 1 , further including the steps of: 

2 storing in a memory storage device, the data packets or frames 

3 captured over a second period of time; and 

4 performing an offline detailed analysis on the contents of the IEEE 

5 802.11(b) header of the data packets or frames, and associated protocol layers, 

6 stored in the memory storage device; and 

7 displaying the results to the user. 

1 3 . The method of Claim 1 , ftjrther including the step of: 

2 selectively turning said detailed protocol analysis on or off for a 

3 particular protocol layer, whereby for a protocol layer turned off, that layer and 
1 all protocol layers above or higher than that layer are not subjected to a 
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detailed protocol analysis. 

The method of Claim 1, wherein the step of performing a detailed protocol 
analysis includes the step of generating alarms for display relating to detected 
network and protocol errors. 

The method of Claim 4, wherein the step of performing a detailed protocol 
analysis further includes selectively turning on or off said alarm generating 
step. 

The method of Claim 4, wherein the step of performing a detailed protocol 
analysis further includes the steps of: 

assigning a default severity level from a plurality of available severity 
levels for each available alarm; and 

selectively determining whether a particular alarm type is to be logged 
when generated. 

The method of Claim 6, fiirther including the step of selectively marking an 
alarm as a diagnosis or a symptom dependent upon the detected severity level. 

The method of Claim 1, wherein said step of displaying includes the step of 
showing all layers of protocols analyzed for each capture of frame or data 
packets. 

The method of Claim 8, wherein said step of displaying further includes the 
step of: 

showing the total number of frames and octets analyzed for a selected 
protocol layer. 

The method of Claim 8, wherein said step of displaying includes the step of 
showing for a selected protocol layer, lower layer objects linked to a current 
selected object. 
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1 11. The method of Claim 8, wherein said step of displaying includes the step of 

2 showing the hosts created for said IEEE 802. 1 1 (b)wireless communication 

3 layer, and the attributes of said hosts, respectively. 

1 12. The method of Claim 1 1 , further including showing detailed statistics for each 

2 selected host. 

1 13, The method of Claim 1 1 , further including showing attributes for each selected 

2 host, including MAC address, station function, frame types, channel, network 

3 types, BSSID, and SSID. 

1 14. The method of Claim 1 1 , fijrther including showing the higher layer DLC 

2 , objects linked to selected wireless layer hosts, respectively. 

1 15. The method of Claim 11, further including showing alarms associated with a 

2 ' J selected host. 

1 -== 16. The method of Claim 1 , wherein said step of detailed protocol analysis 

2 includes the steps of: 

3 permittmg a user to enter the MAC addresses of known access points 

4 operating in said IEEE 802.1 1(b) wireless communication channel; 

5 selectively activating a rogue access point detection routine; 

6 checking the addresses of newly detected access points against the 

7 addresses of said known access points; and 

8 marking for display as a rogue access point, any access point detected 
? that is not included as a known access point. 

I 17. A wireless network troubleshooting tool for monitoring an IEEE 802.1 1 (b) 

- LAN wireless communication network to detect and diagnose failures in said 
wireless coirunimication network, said tool comprising: 
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4 a wireless network interface device operable in a promiscuous mode 

5 within a wireless communications network for CE^turing a plurality of 

6 frames or data packets transmitted through the network for all stations or 

7 devices associated therewith; 

8 a user interface system including input and output devices for enabling 

9 a user to input and obtain information associated with said plurality of 

10 captured frames; 

1 1 a memory storage device for storing said plurality of captured frames 

12 as received from said wireless network interface device; and 

1 3 a programmable processor unit connected to said wireless network 

14 _ interface device, said user interface system, and said memory storage device, 

1 5 said processor being programmed to execute a routine comprising the steps of: 

16 establishing a direct wireless logical connection with said 

1 7 wireless communications network via the network interface device; 

8 receiving wirelessly, in real-time, frames fransmitted in the 

9 wireless communications network via direct wireless logical connection; 

0 receiving from said user, via said user interface ,configuration 

1 parameters; 

2 performing, through use of said configuration parameters a 

3 detailed protocol analysis on the contents of respective headers of the 
1 captured data packets or frames, including associated protocol layers, 

) respectively; and 



displaying the results of the analysis to the user in real-time. 
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